diff --git a/op/op.RemoveVersion.php b/op/op.RemoveVersion.php index c05a2b780..7a989e250 100644 --- a/op/op.RemoveVersion.php +++ b/op/op.RemoveVersion.php @@ -40,6 +40,10 @@ if (!is_object($document)) { UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_doc_id"))),getMLText("invalid_doc_id")); } +if (!$settings->_enableVersionDeletion && !$user->isAdmin()) { + UI::exitError(getMLText("document_title", array("documentname" => htmlspecialchars($document->getName()))),getMLText("access_denied")); +} + if ($document->getAccessMode($user) < M_ALL) { UI::exitError(getMLText("document_title", array("documentname" => $document->getName())),getMLText("access_denied")); }